PaperclipGHSA-3xx2/GHSA-47wq - Paperclip agent key tenant-boundary bypassMay 2, 2026GHSA-vr7g-88fq-vhq3 - Paperclip workspace cleanup command injectionMay 2, 2026